CVE-2022-22720
HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier
Summary
HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier
Original description
The description as published by the source.
Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling
Affected packages
Bitnami
apache
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.53"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2022-22720 apache2 Fixed in: 2.4.53-r0
- Debian DEBIAN-CVE-2022-22720 apache2 Fixed in: 2.4.53-1~deb11u1
References
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory nvd.nist.gov
- advisory github.com
- web seclists.org
- web seclists.org
- web seclists.org
- web openwall.com
- web httpd.apache.org
- web lists.debian.org
- web support.apple.com
- web support.apple.com
- web support.apple.com
- web oracle.com
- web oracle.com